Renovate Dashboard 🤖

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

---

Warning

Renovate failed to look up the following dependencies: Failed to look up go package github.com/goccy/go-yaml.

Files affected: go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update maru support dependencies (actions/create-github-app-token, anchore/sbom-action, github/codeql-action, zarf-dev/zarf)
• fix(deps): update maru code dependencies (github.com/spf13/cobra, github.com/spf13/pflag, github.com/spf13/viper, github.com/stretchr/testify)
• chore(deps): update maru support dependencies (major) (actions/setup-go, actions/setup-node)
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

github-actions

.github/actions/golang/action.yaml

• actions/setup-go v5.5.0@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
• go 1.25.x

.github/actions/install-tools/action.yaml

• anchore/sbom-action v0.20.5@da167eac915b4e86f08b264dbdbc867b61be6f0c

.github/actions/save-logs/action.yaml

• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02

.github/actions/zarf/action.yaml

.github/workflows/ci-doc-shim.yaml

.github/workflows/commitlint.yaml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/setup-node v4.4.0@49933ea5288caeca8642d1e84afbd3f7d6820020

.github/workflows/dependency-review.yaml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/dependency-review-action v4.7.3@595b5aeba73380359d98a5e087f648dbb0edce1b

.github/workflows/release.yaml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/download-artifact v5.0.0@634f93cb2916e3fdff6788551b99b062d0335ce0
• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• actions/download-artifact v5.0.0@634f93cb2916e3fdff6788551b99b062d0335ce0
• actions/create-github-app-token v2.1.1@a8d616148505b5069dccd32f177bb87d7f39123b
• goreleaser/goreleaser-action v6.4.0@e435ccd777264be153ace6237001ef4d979d3a7a

.github/workflows/scan-codeql.yaml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• github/codeql-action v3.30.1@f1f6e5f6af878fb37288ce1c627459e94dbf7d01
• github/codeql-action v3.30.1@f1f6e5f6af878fb37288ce1c627459e94dbf7d01

.github/workflows/scan-lint.yaml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• golangci/golangci-lint-action v8.0.0@4afd733a84b1f43292c63897423277bb7f4313a9
• pre-commit/action 1b06ec171f2f6faa71ed760c4042bd969e4f8b43

.github/workflows/scorecard.yaml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8
• ossf/scorecard-action v2.4.2@05b42c624433fc40578a4040d5cf5e36ddca8cde
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• github/codeql-action v3.30.1@f1f6e5f6af878fb37288ce1c627459e94dbf7d01

.github/workflows/test-e2e-pr.yaml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8

.github/workflows/test-schema.yaml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8

.github/workflows/test-unit-pr.yaml

• actions/checkout v5.0.0@08c6903cd8c0fde910a37f88322edcfb5dd907a8

gomod

go.mod

• go 1.24.0
• github.com/defenseunicorns/pkg/exec v0.0.2
• github.com/defenseunicorns/pkg/helpers/v2 v2.0.4
• github.com/goccy/go-yaml v1.18.0
• github.com/invopop/jsonschema v0.13.0
• github.com/spf13/cobra v1.9.1
• github.com/spf13/pflag v1.0.7
• github.com/spf13/viper v1.20.1
• github.com/stretchr/testify v1.10.0
• github.com/zalando/go-keyring v0.2.6

regex

.github/actions/zarf/action.yaml

• zarf-dev/zarf v0.61.2

---

• Check this box to trigger a request for Renovate to run again on this repository